Vulnerability

Hi @marketeeringroup,

Thanks for reporting this.

However, we think this is the same vulnerability that was reported to us in April, 2023 and was patched on version 8.4.7. You can see it in more detail here: https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/simple-share-buttons-adder/simple-share-buttons-adder-846-cross-site-request-forgery

It’s possible that WP Engine hasn’t updated their information on this and is still reporting the issue as open.

Best regards,

The ShareThis Technical Support team.

Hello,

Thank you for bringing this to our attention.

This vulnerability has been solved in a previous update. We have informed our engineering team about the fact that the issue still appears on Patchstack, they have made another review of the plugin and the tests indicate that the vulnerability has already been solved.

Our team is in contact with the Patchstack team so they can further review their report and update it on their website.

Best,
-ShareThis Support Team